Read the docs

AIDotNet

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

AIDotNet records in CISA KEV

No AIDotNet vulnerabilities are listed in CISA KEV.

Records

1 record

Priority HIGH 81

OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to forge administrator tokens using the publicly known Jwt:SecretKey in appsettings.json.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00371 Published 2026-10-30 No fix listed CWE-321
Open these records in search →